GSLC questions and answers

Which of the following is contained in the signature section of an X.509 digital certificate?

Which type of DNS zone is a read-only copy of the primary DNS zone?

Rick works as a project manager for a construction project. He is documenting products, services, and results requirements and identifying potential sellers.
In which of the following Knowledge Areas is he working on?

Using a network extraction approach for logging requires which of the following?

This is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a, 802.11b, and 802.11g standards. The main features of these tools are as follows: It displays the signal strength of a wireless network, MAC address, SSID, channel details, etc.
It is commonly used for the following purposes:A. War driving

Which of the following statements are true about an application-level gateway? Each correct answer represents a complete solution. Choose all that apply.

Your IDS discovers that an intruder has gained access to your system. You immediately stop that access, change passwords for administrative accounts, and secure your network. You discover an odd account (not administrative) that has permission to remotely access the network.

What is this most likely?

An attacker discovers a XSS vulnerability on the website www.vulnerability.com. The attacker sends an email to several potential victims with a link that exploits the XSS vulnerability.

What role does the application server for www.vulnerability.com play in this attack?

Which of the following is a method of defeating a cryptographic scheme by trying a large number of possibilities?

Which of the following is a signature-based intrusion detection system (IDS) ?

DRAG DROP

You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2003. The company has recently provided laptops to its sales team members. You have configured access points in the network to enable a wireless network. The company's security policy states that all users using laptops must use smart cards for authentication. Select and place the authentication method you are required to configure to implement the security policy of the company.

Which of the following technologies is used to detect unauthorized attempts to access and manipulate computer systems locally or through the Internet or an intranet?

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

Which of the following tools is John using to crack the wireless encryption keys?

You are responsible for security at a company that specializes in e-commerce. You realize that given the high volume of Web traffic, there is a significant chance of someone being able to breach your perimeter.
You want to make sure that should this occur, you can redirect the attacker away from sensitive data.

How would you best accomplish this?

You work as a Network Administrator for Net Perfect Inc. The company has a Windows Server 2008 network environment. The network is configured as a Windows Active Directory-based single forest single domain network. The domain functional level is set to Windows Server 2003. You have configured an Active Directory-integrated DNS zone on the network. A new security policy dictates that each incoming DNS query should be recorded.

Which of the following steps will you take to implement the new security policy?

Which of the following protocols uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity for secure browsing on the Internet?

Which of the following sections come under the ISO/IEC 27002 standard?

What type of metric measures the behavioral change triggered by an organization's security awareness program?

Which of the following is used to provide the service of exchanging data directly between two hosts on the same network?

It is the technique for gathering information for a Web site owner about a user through a few lines of code that reside in the Web pages. This information is gathered through __________.

Which method is used to configure several disk drives into a logical disk drive and provides faulttolerance, redundancy, lower latency, and higher bandwidth for read/write operations?

The excerpt below is an example of which of the following?

Employee can describe the importance of multi-factor authentication for remote access and mobile devices, and can authenticate from a remote or mobile device using their network credentials and a one-time password token.

Which interface does an IPS sensor use to communicate with a security appliance for management purposes?

Dawn is the project manager of the HQQ Project and she believes the project work is done. She has prepared the final project report, which includes information on the financial performance, schedule performance, and project team performance in the project.
All of the following documents are used to measure the completeness of the project scope except for which one?

You work as Network and Security Manager for PassGuide Inc. The management of the company is quite concerned about the security of the network. The management has assigned this task to you to improve the security.

Which of the following access methods will you use if the method is to be primarily based on pre-established access, and users cannot change it?

A SaaS provider serves customers from several companies.

Which cloud computing feature introduces the risk of one customer gaining unauthorized access to another customer's data?

Which of the following is a software testing method that uses an internal perspective of the system to design test cases based on the internal structure?

Which of the following is a model that uses a predefined set of access privileges for an object of the system?

You work as a Network Administrator for Net World Inc. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2003. A Public Key Infrastructure (PKI) is installed on a server in the domain. You are planning to go on vacation for two weeks. Your team has three assistant administrators. You are required to accomplish the following tasks:

Delegate the authority to the assistant administrators to issue, approve, and revoke certificates.
The solution must involve least administrative burden.

Which of the following steps will you take to accomplish the tasks?

According to Microsoft's privacy guidelines, which of the following data types includes statistic from aggregate information?

Which of the following types of computers is used for attracting potential intruders?

Which of the following is a property of a stream cipher?

The MBR of a hard disk is a collection of boot records that contain disk information such as disk architecture, cluster size, and so on. The main work of the MBR is to locate and run necessary operating system files that are required to run a hard disk. In the context of the operating system, MBR is also known as the boot loader.
Which of the following viruses can infect the MBR of a hard disk?
Each correct answer represents a complete solution. Choose two.

You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network.
Rick, your assistant, is configuring some laptops for wireless access. For security, WEP needs to be configured for wireless communication. By mistake, Rick configures different WEP keys in a laptop than that is configured on the Wireless Access Point (WAP).

Which of the following statements is true in such situation?

You and your project team have identified the project risks and now are analyzing the probability and impact of the risks.

What type of analysis of the risks provides a quick and high-level review of each identified risk event?

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs?

NIST Special Publication 800-50 is a security awareness program. It is designed for those people who are currently working in the information technology field and want information on security policies.
Which of the following are some of its critical steps?
Each correct answer represents a complete solution. Choose two.

Which of the following terms describes an attempt to transfer DNS zone data?

How should Learning Objectives be developed in regard to an organization's managed risks?

Which of the following processes is NOT a part of the Project Procurement Management Knowledge Area?

Which of the following viruses is designed to prevent antivirus researchers from examining its code by using various methods that make tracing and disassembling difficult?

You work as a Network Administrator for Net Perfect Inc. The company has a TCP/IP-based network environment. The network contains a Cisco Catalyst router to connect the internal network to the Internet.
You want to secure your network from various attacks such as virus, spam, spyware, phishing, etc. You want to secure the whole network through a separate hardware device.

Which of the following will you use?

Which of the following types of firewall ensures that the packets are part of the established session?

You are writing the change management plan for your upcoming project. You want to address mistakes that could happen during the execution of the project. Your change management plan requires the project team to correct any errors that deviate from the project scope as an error is technically an unapproved scope change.

What else should you address in regard to errors in project team execution?

Maria works as the Chief Security Officer for PassGuide Inc. She wants to send secret messages to the CEO of the company. To secure these messages, she uses a technique of hiding a secret message within an ordinary message. The technique provides 'security through obscurity'.

What technique is Maria using?

Which of the following authentication methods is used to enable a Web browser to provide credentials when making a request during an HTTP transaction?

Which of the following viruses replaces the boot sector data with its own malicious code?

Which security control is primarily concerned with reducing the cyber risk introduced by employees and other insiders within the organization?

Which of the following tools can be used for stress testing of a Web server? Each correct answer represents a complete solution. Choose two.

Which of the following is a network protocol that allows data to be exchanged using a secure channel between two networked devices?

Which SIEM feature reduces false positives?

Which of the following malware spread through the Internet and caused a large DoS attack in 1988?

Which of the following is a type of encryption that uses a single key to encrypt and decrypt data?

Which is a computer system on the Internet that is expressly set up to attract and trap people who attempt to penetrate other people's computer systems?

Brutus is a password cracking tool that can be used to crack the following authentications:

HTTP (Basic Authentication)
HTTP (HTML Form/CGI)
POP3 (Post Office Protocol v3)
FTP (File Transfer Protocol)
SMB (Server Message Block)
Telnet

Which of the following attacks can be performed by Brutus for password cracking? Each correct answer represents a complete solution. Choose all that apply.

What is another term that can be assigned to the pre-program analysis and research to determine if a program should be initiated?

Which of the following programs can collect various types of personal information, such as Internet surfing habits, and Web sites that the user has visited?

Fill in the blank with the appropriate term.
NOTE. Do not use abbreviation.
________ is a configurable client identification that allows a client to communicate with a particular base station.

Which of the following applications would be considered a data warehousing application?

Which of the following algorithms can be used to check the integrity of a file? Each correct answer represents a complete solution. Choose two.

Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

You work as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network.
You are working as a root user on the Linux operating system. Your company is facing an IP spoofing attack.

Which of the following tools will you use to get an alert saying that an upcoming IP packet is being spoofed?

HOTSPOT

Steve works as a Network Administrator for Blue Tech Inc. All client computers in the company run the Windows Vista operating system. He often travels long distances on official duty. While traveling, he connects to the office server through his laptop by using remote desktop connection. He wants to run an application that is available on the server of the company. When he connects to the server, he gets a message that the connection is blocked by the firewall. He returns to his office to resolve the issue. He opens the Windows Firewall Settings dialog box.

What actions should he perform in the dialog box given below to accomplish the task?

You work as a Network Administrator for Infosec Inc. The company has a Windows 2003-based server.
You have installed McAfee antivirus as well as anti-spyware software on the server. One day, you come to know that not only have the security applications running on the server (including software firewalls, anti-virus, and anti-spyware) been disabled, but the anti-virus and anti-spyware definitions have also been deleted. You suspect that this is due to malware infection.

Which of the following types of malware is the most likely cause of the issue?

The Diffie-Hellman algorithm is used for which of the following?

Which SOC model strives for the most comprehensive visibility into network and device activity?

US Garments wants all encrypted data communication between corporate office and remote location.
They want to achieve following results:

Authentication of users
Anti-replay
Anti-spoofing
IP packet encryption

They implemented IPSec using Authentication Headers (AHs). Which results does this solution provide? (Click the Exhibit button on the toolbar to see the case study.) Each correct answer represents a complete solution. Choose all that apply.

John works as a professional Ethical Hacker. He has been assigned the task of testing the security of www.we-are-secure.com. He installs a sniffer on the We-are-secure server thinking that the following protocols of the We-are-secure server are being used in the network:

HTTP

SSL
SSH
IPSec
Considering the above factors, which of the following types of packets can he expect to see captured in encrypted form when he checks the sniffer's log file? Each correct answer represents a complete solution.
Choose all that apply.

Which of the following tools can be used for steganography? Each correct answer represents a complete solution. Choose all that apply.

Which of the following tools can be used to perform polymorphic shell code attacks?

Which of the following are the automated tools that are used to perform penetration testing? Each correct answer represents a complete solution. Choose two.

You work as an Administrator for Bluesky Inc. The company has 145 Windows XP Professional client computers and eighty Windows 2003 Server computers. You want to install a security layer of WAP specifically designed for a wireless environment. You also want to ensure that the security layer provides privacy, data integrity, and authentication for client-server communications over a wireless network.
Moreover, you want a client and server to be authenticated so that wireless transactions remain secure and the connection is encrypted.

Which of the following options will you use to accomplish the task?

Maria has been recently appointed as a Network Administrator in Gentech Inc. She has been tasked to perform network security testing to find out the vulnerabilities and shortcomings of the present network infrastructure.

Which of the following testing approaches will she apply to accomplish this task?

You are the program manager for your organization. You have proposed a program that will cost $750,000 and will last for four years. Management is concerned with the cost of the program in relation to the return your program will bring.
If the rate of return is six percent what is the minimum value your project should return in four years based on the investment of the program?

Which of the following is involved with the improvement of different courses of actions that include changes in schedule, resources, or contract?

Which of the following is a virus that can redirect the disk head to read another sector instead of the one in which it resides?

Which of the following is used to translate domain names into the numerical (binary) identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide?

Which of the following items are generally analyzed by Internet filters? Each correct answer represents a
complete solution. Choose three.

What is the output of a SOC's Collection function?

You are concerned about war driving bringing hackers attention to your wireless network.

What is the most basic step you can take to mitigate this risk?

A SIEM collects specific log events extracted from network activity.

Which strategy has been implemented?

The Executing Process Group corresponds to which element of the PDCS cycle of project management?

Which of the following terms describes the statement given below?
"It is a cryptographic protocol that provides security and data integrity for communications over networks such as the Internet."

You work as a Network Administrator for Perfect Labs Inc. The company has a TCP/IP-based network, which is connected to the Internet. You want to provide Internet access to users. You are concerned about virus threats and want to protect the network against potential virus attacks from the Internet.

Which of the following steps will you take to minimize potential virus attacks?

A SOC running 24 hours a day, including weekends, needs to fill a new analyst position.

How many full time employees should the SOC hire to ensure coverage for all shifts, while still allowing vacations, training, and sick days?

What type of guidance does NIST SP 800-30 provide?

Which of the following port numbers is used by the LDAP protocol when it is secured?

Which of the following attacks does Management Frame Protection help to mitigate? Each correct answer represents a complete solution. Choose two.

The snippet shown below is an example of which of the following?

You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Server 2008
Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2008. The company's headquarters is located at Los Angeles. A branch office of the company is located at Denver. You are about to send a message to Rick who is a Network Administrator at Denver.
You want to ensure that the message cannot be read by anyone but the recipient.

Which of the following keys will you use to encrypt the message?

Gathering technical and compliance related requirements for a security architecture project would fall under which NUST CSF core function?

Which of the following are the countermeasures against WEP cracking? Each correct answer represents a part of the solution. Choose all that apply.

John works as an IT Technician for PassGuide Inc. One morning, John receives an e-mail from the company's Manager asking him to provide his logon ID and password, but the company policy restricts users from disclosing their logon IDs and passwords.

Which type of possible attack is this?

Adrian knows the host names of all the computers on his network. He wants to find the IP addresses of these computers.
Which of the following TCP/IP utilities can he use to find the IP addresses of these computers?
Each correct answer represents a complete solution. Choose two.

Which of the following is a valid space efficiency of RAID 3?

Which of the following Acts enacted in United States allows the FBI to issue National Security Letters (NSLs) to Internet service providers (ISPs) ordering them to disclose records about their customers?

In which technique are phases overlapped that would normally be done in sequence?

Which of the following is used to authenticate asymmetric keys?

Which of the following is an example of a compliance metric for a security awareness program?

Which of the following is used to detect malicious activity such as port scans or even attempts for cracking into computers by monitoring network traffic?